CVE Intelligence

Oracle Retail Applications vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Retail Applications: 1 record(s), with affected versions and fixes.
cpe:2.3:a:oracle:retail_applications

CVE-2014-0050 High · 7.5 Public exploit CWE-264 Apr 1, 2014
Permissions, Privileges, and Access Controls in Oracle Retail Applications
MultipartStream.java in Apache Commons FileUpload before 1.3.1, as used in Apache Tomcat, JBoss Web, and other products, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted Content-Type header that bypasses a loop's intended exit conditions.